> -----Original Message-----
> From: Jim Starkey [mailto:jas@...]
> Sent: Miércoles 18 de Abril de 2001 16:59
> To: IB-Architect@yahoogroups.com; firebird-devel@...
>
> Yeah. Although the Interbase role model is a single role
> identified at logon, a more useful model is multiple roles,
> each of which may be turned on or off during a session.
> Although I don't think this is the most critical short term
> feature on the menu, designing an interface that couldn't
> support it could be a problem down the road.

Jim, while the SQL standard that you love too much probably doesn't talk
about switching roles in run-time without disconnecting from the db, there's
a static provision: the SQL standard caters for roles that can be granted to
roles. So, this is poor's man way to have several roles assigned. The
drawback is obviously that you have to create the new role in advance and
grant to it the already present roles you want. At least you have
aggregation.
I've read the code and there's a little stub (with a comment) in DYN where
code can be written for this purpose. After that, I guess we would need to
change grant.e to check permissions in run-time... this is more
intimidating, since the code has a comment saying "do not change the order
of these clauses" or something alike.

C.